A new phishing scam is targeting MetaMask users, tricking them with fake 2FA messages to steal their wallet seed phrases. The attackers use cloned websites and urgent emails to gain full access to users’ wallets.

MetaMask, the world-renowned crypto wallet initially built for Ethereum, has officially added Bitcoin support, nearly ten months after first hinting at the integration.

As phishing scams drain over $400 million in crypto this year alone, a powerful new alliance led by the Security Alliance (SEAL) is rising to fight back.

Coinbase’s Base App displayed incorrect balances after an Amazon Web Services outage affected multiple crypto platforms. No funds were lost, and the issue was caused by a technical change in how the app shows coin values, while some networks and wallets experienced delays.

MetaMask has launched perpetual futures trading and will soon integrate Polymarket’s prediction markets, allowing users to trade and speculate while keeping full control of their funds. The platform is also rolling out a rewards programme ahead of its token launch, marking its shift from a wallet to a broader financial hub.

MetaMask has unveiled a $30 million rewards campaign—not just as a thank-you gesture, but as the foundation of a new sustainable tokenomics model, the company is trying to build for the Web3 ecosystem.

MetaMask has introduced a social login feature, letting users create and access wallets using Google or Apple accounts instead of a 12-word recovery phrase. The system keeps wallets secure with a unique password and local encryption, aiming to make crypto easier for new users while maintaining self-custody.

MetaMask has launched its own dollar-pegged stablecoin, mUSD, integrated directly into its wallet for easy spending and transfers. The token is supported by Stripe-backed Bridge and M0, allowing users to transact across Ethereum and Linea while staying fully compliant.

A malware campaign disguised as fake crypto apps has exposed over 10 million people worldwide by stealing their personal and crypto data. The malware spreads through deceptive ads and targets browser extensions like MetaMask to access users’ wallets and credentials.

Scammers used real-looking Coinbase emails and a US phone number to trick a user into giving away personal and crypto details. The scam failed, but it shows how phishing attacks are becoming more convincing and dangerous.